Makes it possible to change status/severity/owner via spl, example:
Built by
Latest Version 1.0.4
June 16, 2025
Compatibility
This is compatibility for the latest version
Not Available
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
Rating
0
(0)
Log in to rate this app
Support
Developer Supported addon
Makes it possible to change status/severity/owner via spl, example:
| makeresults | eval field="status", episodeId="0000-000-000-0000", value="5" | itsiedit fieldField=field episodeidField=episodeId valueField=value
This is a command wrapper around the ITSI API, and therefor you're able to use the same values as described here:
https://docs.splunk.com/Documentation/ITSI/latest/EA/EpisodeAPI